This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/CkjsI0a6qjf95RqzL9n0_9ScEx0.roa File: CkjsI0a6qjf95RqzL9n0_9ScEx0.roa (raw, json) Hash identifier: 5u6nDeE9aisGwepfaemFh64gZM4mmVi0SRqVb6MIIhM= Subject key identifier: 0A:48:EC:23:46:BA:AA:37:FD:E5:1A:B3:2F:D9:F4:FF:D4:9C:13:1D Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56 Certificate serial: 019B7C805FA5CEF3AF72157288DCFC56ECF4 Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/CkjsI0a6qjf95RqzL9n0_9ScEx0.roa Signing time: Fri 02 Jan 2026 02:19:06 +0000 ROA not before: Fri 02 Jan 2026 02:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57304 IP address blocks: 45.135.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:5f:a5:ce:f3:af:72:15:72:88:dc:fc:56:ec:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56 Validity Not Before: Jan 2 02:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a48ec2346baaa37fde51ab32fd9f4ffd49c131d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7a:c6:cb:61:f2:2c:17:3a:07:5d:8f:c4:ad: f5:38:f9:ae:02:dd:17:36:e6:67:0c:4d:98:bf:55: ab:17:2b:cb:6a:99:63:2a:58:ca:74:41:cb:a2:6a: 6d:cb:e3:04:1c:fc:fe:b4:b4:7c:dd:22:28:ba:25: 7f:d9:16:8b:f3:f0:e7:7b:b6:9e:d9:ad:1c:b9:d6: e7:94:21:31:93:1e:0a:f1:e9:e3:66:6a:86:df:11: 7e:7b:65:10:43:72:23:b5:fe:eb:c7:cd:fb:2e:cb: 67:c0:5f:0c:db:bf:cc:05:13:c9:92:92:3a:ca:a9: f3:25:cf:58:40:5a:7e:50:d8:b2:db:34:45:60:fe: d4:a6:bb:f8:62:30:ac:f1:9f:0e:93:e9:3b:cb:b3: 53:19:9e:fa:e3:30:ec:34:f8:de:65:6a:3a:48:69: f5:10:a7:b7:1c:e4:8c:29:30:51:8c:89:3f:5b:b3: 4d:32:55:0d:d1:48:43:68:79:c6:26:08:19:8e:b1: 82:eb:f7:59:ce:85:9d:b8:b1:1f:3b:55:72:f2:29: d0:ac:1b:ff:26:98:15:b7:87:4b:fc:12:71:54:f8: f2:21:a9:72:c2:c3:f7:01:b6:d5:83:64:54:2e:aa: a6:a9:1e:53:0d:6d:a4:53:ca:65:0e:a4:c3:62:d4: a4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:48:EC:23:46:BA:AA:37:FD:E5:1A:B3:2F:D9:F4:FF:D4:9C:13:1D X509v3 Authority Key Identifier: keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/CkjsI0a6qjf95RqzL9n0_9ScEx0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.167.0/24 Signature Algorithm: sha256WithRSAEncryption b1:fb:49:37:42:a8:8e:93:27:ae:bc:87:a9:08:f4:ec:83:03: 08:83:ee:29:99:b5:ec:a9:28:e0:8a:95:f0:9d:0e:e3:11:86: f3:55:93:cc:dd:01:a7:e2:34:9b:94:0b:7a:b9:21:2d:e8:e8: ff:ab:d2:fa:57:d4:8f:8e:f3:e9:a0:41:c1:2f:33:fd:af:ba: ee:d4:2b:bd:ed:2a:5d:8e:3b:a9:52:83:b3:a3:5b:5d:43:78: 96:21:ab:d5:19:42:cc:3c:a3:0c:19:4a:63:30:ad:50:dd:50: 4c:c9:ca:bd:ae:c0:48:68:a1:07:6d:81:e3:ef:33:3d:78:46: fd:c1:cc:e0:dc:43:07:d0:7b:60:02:ec:02:f4:62:f8:d9:e4: 82:34:22:e9:91:17:02:b1:d6:05:d8:f2:4f:91:3d:44:2d:f7: 07:af:1b:f3:44:4b:fb:8e:3a:ef:81:4e:b8:6a:08:56:11:66: 22:24:14:f1:ed:89:1e:93:fd:9f:30:52:30:7b:b0:04:81:35: a6:2f:f8:11:6c:e5:30:a1:e1:fa:d9:83:58:bc:01:1a:a2:76: 2f:d4:d2:fc:6f:f1:75:5f:0c:38:e3:70:1f:5e:ce:70:57:81: 9a:84:b6:4a:81:44:ac:7b:82:96:31:1a:57:5a:70:7c:a2:4e: b3:13:69:d1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gF+lzvOvchVyiNz8Vuz0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0 ZjVlNTYwHhcNMjYwMTAyMDIxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTQ4ZWMyMzQ2YmFhYTM3ZmRlNTFhYjMyZmQ5ZjRmZmQ0OWMxMzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3rGy2HyLBc6B12PxK31OPmuAt0X NuZnDE2Yv1WrFyvLapljKljKdEHLompty+MEHPz+tLR83SIouiV/2RaL8/Dne7ae 2a0cudbnlCExkx4K8enjZmqG3xF+e2UQQ3Ijtf7rx837LstnwF8M27/MBRPJkpI6 yqnzJc9YQFp+UNiy2zRFYP7Uprv4YjCs8Z8Ok+k7y7NTGZ764zDsNPjeZWo6SGn1 EKe3HOSMKTBRjIk/W7NNMlUN0UhDaHnGJggZjrGC6/dZzoWduLEfO1Vy8inQrBv/ JpgVt4dL/BJxVPjyIalywsP3AbbVg2RULqqmqR5TDW2kU8plDqTDYtSkRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFApI7CNGuqo3/eUasy/Z9P/UnBMdMB8GA1UdIwQY MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt YmE5OGYxMTIyMTIxLzEvQ2tqc0kwYTZxamY5NVJxekw5bjBfOVNjRXgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYenMA0G CSqGSIb3DQEBCwUAA4IBAQCx+0k3QqiOkyeuvIepCPTsgwMIg+4pmbXsqSjgipXw nQ7jEYbzVZPM3QGn4jSblAt6uSEt6Oj/q9L6V9SPjvPpoEHBLzP9r7ru1Cu97Spd jjupUoOzo1tdQ3iWIavVGULMPKMMGUpjMK1Q3VBMycq9rsBIaKEHbYHj7zM9eEb9 wczg3EMH0HtgAuwC9GL42eSCNCLpkRcCsdYF2PJPkT1ELfcHrxvzREv7jjrvgU64 aghWEWYiJBTx7Ykek/2fMFIwe7AEgTWmL/gRbOUwoeH62YNYvAEaonYv1NL8b/F1 Xww443AfXs5wV4GahLZKgUSse4KWMRpXWnB8ok6zE2nR -----END CERTIFICATE-----Generated at Sat Jan 10 03:55:37 2026 by rpki-client